Apple Gatekeeper notarised distributables

MacOSX and iOS
61

Changing the content of the App-bundle will only invalidate the code signature. Re-signing means running something like:

codesign --force --sign "Developer ID" --options runtime --entitlements mine.entitlements --timestamp DAW.app

where mine.entitlements contains at least:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>com.apple.security.cs.disable-library-validation</key>
	<true/>
	<key>com.apple.security.device.audio-input</key>
	<true/>
	<key>com.apple.security-get-task-allow</key>
	<true/>
</dict>
</plist>

I’ve actually never tried to do that, so something might not work as expected, but that’s the theory.

6 Likes